Skip to content
OpenAdvisories

Archive

9 October 2024

Vulnerabilities first published on this day (UTC), newest first.

3 results · Clear filters · Feed

  • Critical 9.2
    CVE-2024-9465 Exploited Public exploit Scanner template EPSS 100%

    Expedition: SQL Injection Leads to Firewall Admin Credential Disclosure

    An SQL injection vulnerability in Palo Alto Networks Expedition allows an unauthenticated attacker to reveal Expedition database contents, such as password hashes, usernames, device configurations, and device API keys. With this, attackers can also create and…

    KEV Nov 14, 2024
  • Critical 9.9
    CVE-2024-9463 Exploited Public exploit Scanner template EPSS 99%

    Expedition: Unauthenticated OS Command Injection Vulnerability Leads to Firewall Credential Disclosure

    An OS command injection vulnerability in Palo Alto Networks Expedition allows an unauthenticated attacker to run arbitrary OS commands as root in Expedition, resulting in disclosure of usernames, cleartext passwords, device configurations, and device API keys…

    KEV Nov 14, 2024
  • Critical 9.8
    CVE-2024-9680 Exploited · Ransomware Public exploit EPSS 23%

    An attacker was able to achieve code execution in the content process by exploiting a use-after-free in Animation timel…

    KEV Oct 15, 2024